^ 



TRANSMITTAL LETTER 



Case No. 10022/26 



Serial No. 
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Filing Date 
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Examiner 

Not Yet Determined 



Group Art Unit 
2131 



Inventor(s) 
Cornelius et al. 



Title of Invention 

ELECTRONIC SECURITY SYSTEM AND SCHEME FOR A COMMUNICATIONS NETWORK 
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□ 

□ 



TO THE COMMISSIONER FOR PATENTS 

Transmitted herewith is Substitution of Drawings Letter and Seven (7) Sheets of Formal Drawings . 

Small entity status of this application under 37 CFR § 1.27 has been established by verified statement previously 
submitted. 

A verified statement to establish small entity status under 37 CFR § § 1 .9 and 1 .27 is enclosed. 

Petition for a month extension of time. 

No additional fee is required. 

The fee has been calculated as shown below: 
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X $80 = 




+ $270 = 
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Please charge Deposit Account No. 23-1925 (BRINKS HOFER GILSON & LIONE) in the amount of $_ 
duplicate copy of this sheet is enclosed. 



A check in the amount of $_ 



. to cover the filing fee is enclosed. 



The Commissioner is hereby authorized to charge payment of any additional filing fees required under 37 CFR § 
1.16 and any patent application processing fees under 37 CFR § 1.17 associated with this communication or credit 
any overpayment to Deposit Account No. 23*1 925. A duplicate copy of this sheet is enclosed. 

I hereby petition under 37 CFR § 1.136(a} for any extension of time required to ensure that this paper is timely 
filed. Please charge any associated fees which have not otherwise been paid to Deposit Account No. 23-1925. A 
duplicate copy of this sheet is enclosed. 



Respectfully submitted, 




Darin E. Bartholomew 
Registration No. 36,444 
Attorney for Applicant 



BRINKS HOFER GILSON & LIONE 
P.O. BOX 10395 
CHICAGO, ILLINOIS 60610 
(312) 321-4200 

I hereby certify that this correspondence is being deposited with the United States Postal Service 
first class mail, with sufficient postage, in an envelope addressed to: Commissioner for Patents, 
Washington, D.C. 20231, on March 26. 2001 . 

Date: March 26. 2001 Signature; 




rev. Dec.-OO 
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I hereby certify that this correspon(}p^^s being deposited with 
• the United States Postal Service, with sufficient postage, as first 
class mail in an envelope addressed to: 

Commissioner for Patents Washington, D.C. 20231 on; 

March 26, 2001 

Date of Deposit 

Darin E. Bartholomew, Reg. No. 36,444 

Name of applicant, assignee or 
legistered Represent) 




Signfi 
March 26, 2001 



Date of Signature 



Our Case No. 10022/26 



IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

Inventor(s): 

Cornelius et. al. 



Serial No.: 09/710,155 

Filing Date: November 9, 2000 

Title: ELECTRONIC SECURITY 

SYSTEM AND SCHEME FOR A 
COMMUNICATIONS NETWORK 



Examiner: Not Yet Determined 



Group Art Unit No.: 2131 



SUBSTITUTION OF DRAWINGS 

Assistant Commissioner for Patents 
Washington, D.C. 20231 

Dear Sir: 

Applicant has enclosed seven (7) sheets of formal drawings. Please substitute the 
enclosed sheets of formal drawings for the seven (7) sheets of drawings originally filed with 
the application. 

Respectfully submitted^ 

Dated: March 26. 2001 ^^^^ 

Darin E. Barthoioul^ 
Registration No. 36,444 
Attorney for Applicant 

BRINKS, HOFER, GILSON & LIONE 
P.O. BOX 10395 
CHICAGO, ILLINOIS 60610 
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FIG. 2 



sio 



PREPARE A DATA MESSAGE ASSOCIATED WITH (1) A SOURCE ADDRESS OF THE 
SECOND DATA PROCESSING SYSTEM OR A SERVER OF THE SECOND ENTITY, 
AND (2) A DESTINATION ADDRESS OF A FIRST DATA PROCESSING SYSTEM OR A 
SERVER OF THE FIRST ENTITY. 





^S12 


ANNOTATE THE DATA MESSAGE WITH A FIRST PORT IDENTIFIER ASSOCIATED 
WITH A FIRST FIREWALL AND A SECOND PORT IDENTIFIER ASSOCIATED WITH 
THE SECOND FIREWALL, WHERE THE FIRST PORT IDENTIFIER IS DISTINCT 
FROM THE SECOND PORT IDENTIFIER. 




SEND THE DATA MESSAGE AND THE A 
SECOND PORT IDENTIFIER, DESTINATI 
FROM THE SECOND COMMUNICATION 
CATIONS SYSTEM VIA THE EXTERNAL 


SSOCL^TED FIRST PORT IDENTIFIER, 
ON ADDRESS, AND SOURCE ADDRESS 
S SYSTEM TO THE FIRST COMMUNI- 
COMMUNICATIONS NETWORK. 
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S16 



DOES THE SENT DESTINATION ADDRESS AND THE SENT FIRST PORT 
IDENTIFIER MATCH A REFERENCE DESTINATION ADDRESS AND A 
vREFERENCE FIRST PORT IDENTIFIER, RESIDENT IN THE FIRST FIREWALL ? 



YES 



S18 



NO 



PASS THE DATA MESSAGE THROUGH 
THE FIRST FIREWALL 



( 



S20 



BLOCK THE DATA MESSAGE FROM 
TRAVERSING THE FIRST FIREWALL. 
ENTER DATA ON THE DATA 
MESSAGE INTO A SUSPECT 
ACTIVITY LOG. 
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DOES THE SENT SECOND PORT IDENTIFIER MATCH A REFERENCE SECOND 
PORT IDENTIFIER, RESIDENT IN THE SECOND FIREWALL ? 



I 



YES 



S24 



PASS THE DATA MESSAGE THROUGH 
THE SECOND FIREWALL. 



1 



S28 



NO 



I 



S26 



BLOCK THE DATA MESSAGE FROM 
TRAVERSING THE SECOND FIREWALL. 
ENTER DATA ON THE DATA 
MESSAGE INTO A SUSPECT 
ACTIVITY LOG. 



RECEIVE THE DATA MESSAGE AT THE FIRST DATA PROCESSING 

SYSTEM FOR ANY SUBSEQUENT ACTION THAT IS NECESSARY OR APPROPRIATE. 
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FIG. 3 
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PREPARE A DATA MESSAGE ASSOCIATED WITH (1) A SOURCE ADDRESS OF THE 
SECOND DATA PROCESSING SYSTEM OR A SERVER OF THE SECOND ENTITY, 
AND (2) A DESTINATION ADDRESS OF A FIRST DATA PROCESSING SYSTEM OR A 
SERVER OF THE FIRST ENTITY. 
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ANNOTATE THE DATA MESSAGE WITH A FIRST PORT IDENTIFIER ASSOCIATED 
WITH A FIRST FIREWALL. 
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SEND THE DATA MESSAGE AND THE ASSOCIATED FIRST PORT IDENTIFIER, 
DESTINATION ADDRESS, AND SOURCE ADDRESS FROM THE SECOND 
COMMUNICATIONS SYSTEM TO THE FIRST COMMUNICATIONS SYSTEM 
VIA THE EXTERNAL COMMUNICATIONS NETWORK. 



S16 



DOES THE SENT DESTINATION ADDRESS AND THE SENT FIRST PORT 
IDENTIFIER MATCH A REFERENCE DESTINATION ADDRESS AND A 
.REFERENCE FIRST PORT IDENTIFIER, RESIDENT IN THE FIRST FIREWALL ? 





^ YES /^SI8 


1 


NO . S20 


PASS THE DATA MESSAGE THROUGH 
THE FIRST FIREWALL 




BLOCK THE DATA MESSAGE FROM 
TRAVERSING THE FIRST FIREWALL. 
ENTER DATA ON THE DATA 
MESSAGE INTO A SUSPECT 
ACTIVITY LOG. 
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DOES THE SENT SOURCE ADDRESS MATCH A REFERENCE SOURCE 
ADDRESS, RESIDENT IN THE SECOND FIREWALL ? 



YES 
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S24 



PASS THE DATA MESSAGE TFIROUGH 
THE SECOND FIREWALL. 



1 



S28 



NO 



I 



S26 



BLOCK THE DATA MESSAGE FROM 
TRAVERSING THE SECOND FIREWALL. 
ENTER DATA ON THE DATA 
MESSAGE INTO A SUSPECT 
ACTIVITY LOG. 



RECEIVE THE DATA MESSAGE AT THE FIRST DATA PROCESSING 

SYSTEM FOR ANY SUBSEQUENT ACTION THAT IS NECESSARY OR APPROPRIATE. 
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